[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVYWkJXj-WoH4X4-YhTVhBDjToxXu7qg-eL84i4T36cw":3},{"article":4,"iocs":49,"watch_terms":54,"solutions":55,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"7f2d3b46-fb54-4bac-ae08-cf51b93c0e7a","Researchers continue to find serious vulnerabilities in internet connected refrigerators","researchers-continue-to-find-serious-vulnerabilities-in-internet-connected-refri-04d35e","VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units that give an attacker root access, while online honeypots are being flooded with hacks and malicious probes. The post Researchers continue to find serious vulnerabilities in internet connected refrigerators appeared first on CyberScoop.","Cybersecurity firm VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units, manufactured by Copeland, that allow attackers to gain root access. Many of these flaws have high severity scores, and at least two are known to be under active exploitation. These vulnerabilities affect the XWEB EVO supervision system, which was also implicated in a previous hack of supermarket refrigeration controllers in France. Patches are available, and Copeland advises customers to keep devices offline and update software.","14 vulnerabilities in Dixell refrigeration units grant root access, with some under active exploitation.","https:\u002F\u002Fcyberscoop.com\u002Fcopeland-dixell-refrigeration-vulnerabilities\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F11\u002Ffridges.jpeg","2026-11-13T21:20:51+00:00","2026-11-13T22:00:28.366007+00:00",8,[17,20,22,25],{"name":18,"type":19},"Copeland","vendor",{"name":21,"type":19},"Dixell",{"name":23,"type":24},"XWEB EVO","product",{"name":26,"type":27},"Iranian government","threat_actor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,39,44],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":45},{"id":46,"icon":30,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50],{"type":51,"value":52,"context":53},"malware","PHP2Shell","Exploit probes observed in honeypot servers mimicking affected refrigeration units.",[18,21,23],{"controls":56,"vendors":144},[57,86,115],{"slug":58,"name":59,"problem":60,"products":61},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":87,"name":88,"problem":89,"products":90},"patch-management","Automated patch management","Known holes get closed in days, not months.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":116,"name":117,"problem":118,"products":119},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[120,128,136],{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":137,"vendor_name":138,"vendor_logo":139,"product_slug":140,"product_name":141,"url":142,"description":143},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",[],{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":155},"internet-connected-refrigeration-units-expose-critical-infrastructure-to-root-level-attacks","Internet-Connected Refrigeration Units Expose Critical Infrastructure to Root-Level Attacks","VulnCheck disclosed 14 vulnerabilities in Dixell\u002FCopeland XWEB EVO refrigeration supervision systems, several rated high severity, with at least two actively exploited in the wild. The core problem is that operational technology (OT) devices like commercial refrigeration controllers are being exposed directly to the internet without adequate hardening, segmentation, or timely patching. These devices were not designed with modern threat models in mind, yet they are increasingly networked and reachable by attackers. The same system was previously implicated in a supermarket refrigeration hack in France, meaning the risk was known and the lesson was not broadly applied. This matters because exploitation can disrupt critical cold-chain infrastructure — affecting food safety, pharmaceuticals, or industrial processes — and serve as a pivot point into broader facility networks.",[150,151,152,153,154],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 12: Network Infrastructure Management (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIS2 Article 21(2)(e)","NIST CSF 2.0 PR.IR-01: Networks and environments are protected by applying network segmentation and isolation controls",{"NIS2 Article 21(2)(e)":156,"NIST SP 800-53 SI-2: Flaw Remediation":157,"CIS Control 12: Network Infrastructure Management (v8)":158,"CIS Control 7: Continuous Vulnerability Management (v8)":159,"NIST CSF 2.0 PR.IR-01: Networks and environments are protected by applying network segmentation and isolation controls":160},"This point covers security in acquisition, development and maintenance including vulnerability handling, directly requiring operators to manage and remediate known vulnerabilities in systems like XWEB EVO that supervise critical infrastructure.","SI-2 requires organizations to identify, report, and correct system flaws in a timely manner — applying this to OT devices would have ensured patches were deployed before the vulnerabilities reached active exploitation status.","CIS Control 12 calls for securing and segmenting network infrastructure, which would have prevented internet-exposed refrigeration controllers from being directly reachable by external attackers.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities across all assets, including OT\u002FIoT devices — which would have driven timely patching of the XWEB EVO flaws before active exploitation occurred.","This category explicitly calls for network segmentation and isolation, which would have prevented internet-exposed refrigeration supervision systems from being accessible to external threat actors."]